Redacted excerpt; full evidence withheld. $ cd && git log -1 --format=%H 2>/dev/null; ls -la; cat README.md 2>/dev/null | head -300 exit: 0 to know - Approving or rejecting a design always needs your explicit message. Claude Code and Codex also ask for permission before running it (`.claude/settings.json` and `.codex/rules/factory.rules`; Codex reads project rules only if you trust the project in Codex). - A task is `done` only when every acceptance criterion has evidence, the checks pass and the required reviews passed on the final commit. - The Factory only pushes the task branch: no force push, merge or branch deletion. - Orca may launch Claude with `--dangerously-skip-permissions` (its `agentDefaultArgs` setting). The approval rule still asks in that mode. `swfactory doctor` warns when Claude's own settings [excerpt truncated]